Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File:                     oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier:          i2N5jESnENNqWgZtk1bgmgz9N1gUGjhthCi+e8+Tqg8=
Subject key identifier:   F1:59:D5:13:2F:78:30:5A:F6:94:CC:FF:B7:D3:C8:B3:43:DD:1A:C7
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer:       /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial:       019D984F8EF81FDA5DA3B655E530E32ABECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number:          18C9
Signing time:             Thu 16 Apr 2026 22:00:43 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:43 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:43 +0000
Files and hashes:         1: eH9pN3T8uZtfjzNIHm2QIWz86JU.roa (hash: 6WTiCPJHOrzizrSNq8riDUFegfS58h7BM9hToFWx7eQ=)
                          2: ffMr-vGRUopXUQF11fs9N-58S5A.roa (hash: f6/aHTleq3uzGygn/Gg7UKDvdBVMxROzI3ip6izS/3g=)
                          3: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: ao2qKlUSMLrgSyv943l4KNLu9goIHvgWCpw1Yl6o2uo=)
                          4: q4WcfCRWGVzGeRAaFA36efTC1fc.roa (hash: NzEF7aAGWrkW8QtiypziwNCiqL4q9mcX58JJBXOJgOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:8e:f8:1f:da:5d:a3:b6:55:e5:30:e3:2a:be:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
        Validity
            Not Before: Apr 16 22:00:43 2026 GMT
            Not After : Apr 17 22:00:43 2026 GMT
        Subject: CN=f159d5132f78305af694ccffb7d3c8b343dd1ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:f8:f4:9a:8c:6c:a2:69:39:61:e9:21:9b:
                    ab:04:c9:63:5f:1b:e4:a2:fd:29:5b:c7:5d:09:bc:
                    ab:2d:cc:d3:8e:13:b4:d0:1c:02:94:27:40:4b:92:
                    4e:65:9e:7e:a1:c7:9f:fd:3f:ee:2c:96:17:e9:aa:
                    2c:54:35:c6:4c:18:23:c0:4b:9f:da:2c:74:33:0d:
                    64:96:77:10:45:73:83:d2:a4:0c:64:46:12:6c:a6:
                    df:01:48:8c:79:d1:3b:41:ef:3e:40:9d:9f:df:63:
                    2b:86:e4:56:58:5e:64:e9:3c:bb:b3:fb:a6:1e:bb:
                    03:29:e2:a6:0c:f2:99:01:5f:15:93:f4:19:c0:28:
                    b2:40:a5:70:6b:aa:98:80:a5:09:a8:6d:2b:ce:ee:
                    ef:15:64:92:9f:f9:f3:4c:33:fd:d9:44:e5:43:5e:
                    64:c3:52:a3:3d:32:68:62:ff:f7:2c:3e:1e:4c:f4:
                    0c:e9:55:f1:57:96:db:45:d9:72:de:0f:7c:f8:43:
                    b3:73:78:9a:ce:e1:6f:17:4a:3c:98:48:62:15:b9:
                    85:15:93:8e:6f:5f:50:92:16:eb:06:f0:b1:2f:64:
                    4a:4d:48:cf:26:6f:a4:24:39:7b:b1:b0:ad:63:39:
                    31:46:e2:88:0d:a0:68:f9:7d:4f:19:39:bc:c4:db:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:59:D5:13:2F:78:30:5A:F6:94:CC:FF:B7:D3:C8:B3:43:DD:1A:C7
            X509v3 Authority Key Identifier:
                keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:73:4c:e0:b4:e5:90:7a:c5:ae:35:cc:53:b2:c1:70:a8:e4:
         b8:cb:3d:82:77:30:40:22:be:bf:f5:9e:bd:1d:39:48:b6:1a:
         b8:5f:36:4b:d6:f9:0d:a7:3e:cb:cc:6d:5a:ba:f4:e1:b8:81:
         ec:1a:ca:1c:0d:f8:18:51:5e:90:35:1a:0f:96:ac:9e:c1:b4:
         85:bf:27:83:53:e8:09:ae:2f:47:c5:58:e0:81:06:ca:e7:4a:
         81:96:bb:2c:f1:34:ee:22:f5:99:b5:3f:c8:0b:ec:a2:4d:b5:
         e2:b5:59:ce:60:49:5e:a9:04:57:73:c3:7d:25:d5:6c:91:ab:
         0f:50:76:fb:da:b1:fe:3e:fd:1f:fb:8a:64:c1:a0:ba:f2:09:
         ee:68:94:7b:d7:9c:1e:cb:5b:9a:cb:13:46:58:b2:e6:34:1c:
         c1:8b:90:85:a7:de:bb:be:4a:f3:30:af:fe:99:f1:82:03:b6:
         9b:9f:7f:5e:d3:9a:5a:43:5a:5a:40:1f:b5:fa:f5:8c:e5:db:
         89:b5:d1:c3:39:96:d2:9c:41:0e:ac:90:fd:1f:33:5e:4c:20:
         b9:8c:da:bc:02:3f:81:1e:cc:b6:0f:8a:a1:bc:13:cf:e0:d2:
         d5:c2:67:99:60:1e:b0:8c:ef:d9:b9:ee:59:a3:db:c3:e8:4d:
         01:87:20:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:28 2026 by rpki-client